CVE-2026-76494 - Vulnerability Details

- Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.  

The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.

Published: 2026-10-21

Score: 7.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The CVE details a code injection flaw in Cisco Expressway Series software, categorized under CWE‑94. The advisory notes that the flaw was internally discovered and addressed in a hardening release, but it does not specify the exact impact that the injection may have. Based on common characteristics of code injection vulnerabilities, such issues can allow crafted input to be executed by the application, though the specific consequences for confidentiality, integrity, or availability are not mentioned here.

Affected Systems

The flaw applies to Cisco TelePresence Video Communication Server (VCS) Expressway. No particular affected versions are identified, so all installations of Cisco Expressway Series should be examined for the presence of the hardening update.

Risk and Exploitability

The CVSS score is 7.8, reflecting a high severity level. EPSS data is unavailable, and the vulnerability is not recorded in the CISA KEV catalog. The attack vector is not specified in the advisory; as the Expressway product is a network‑connected communications server, it is reasonable to infer that exploitation could occur via exposed network or management interfaces. Because the specific exploitation path and impact are not fully disclosed, organizations should treat the risk as significant until the hardening release is applied.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco TelePresence Video Communication Server (VCS) Expressway

unknown

Version	Status	Constraints
`X8.11.2`	affected	—
`X8.6`	affected	—
`X8.11.3`	affected	—
`X8.2.2`	affected	—
`X8.8.3`	affected	—
`X8.11.0`	affected	—
`X12.5.2`	affected	—
`X8.1.1`	affected	—
`X8.9`	affected	—
`X12.5.1`	affected	—
`X12.5.6`	affected	—
`X8.7.3`	affected	—
`X12.6.0`	affected	—
`X8.11.1`	affected	—
`X8.5`	affected	—
`X8.9.1`	affected	—
`X8.10.2`	affected	—
`X8.8.2`	affected	—
`X8.5.3`	affected	—
`X8.1`	affected	—
`X8.9.2`	affected	—
`X8.11.4`	affected	—
`X12.5.4`	affected	—
`X8.8.1`	affected	—
`X8.2.1`	affected	—
`X8.5.1`	affected	—
`X8.6.1`	affected	—
`X8.1.2`	affected	—
`X8.8`	affected	—
`X8.10.0`	affected	—
`X12.5.3`	affected	—
`X8.10.1`	affected	—
`X12.5.7`	affected	—
`X8.10.3`	affected	—
`X8.7.1`	affected	—
`X8.2`	affected	—
`X12.5.8`	affected	—
`X8.7`	affected	—
`X8.5.2`	affected	—
`X12.5.9`	affected	—
`X12.5.0`	affected	—
`X8.10.4`	affected	—
`X8.7.2`	affected	—
`X12.5.5`	affected	—
`X12.6.1`	affected	—
`X12.6.2`	affected	—
`X12.6.3`	affected	—
`X12.6.4`	affected	—
`X12.7.0`	affected	—
`X12.7.1`	affected	—
`X14.0.0`	affected	—
`X14.0.1`	affected	—
`X14.0.2`	affected	—
`X14.0.3`	affected	—
`X14.0.4`	affected	—
`X14.0.5`	affected	—
`X14.0.6`	affected	—
`X14.0.7`	affected	—
`X14.0.8`	affected	—
`X14.2.0`	affected	—
`X14.0.9`	affected	—
`X14.2.1`	affected	—
`X14.2.2`	affected	—
`X14.0.11`	affected	—
`X14.2.5`	affected	—
`X14.0.10`	affected	—
`X14.2.6`	affected	—
`X14.2.7`	affected	—
`X14.3.0`	affected	—
`X14.3.1`	affected	—
`X14.3.2`	affected	—
`X14.3.3`	affected	—
`X15.0.0`	affected	—
`X14.3.4`	affected	—
`X14.3.5`	affected	—
`X15.0.1`	affected	—
`X15.0.2`	affected	—
`X15.0.3`	affected	—
`X14.3.6`	affected	—
`X15.2.0`	affected	—
`X15.2.1`	affected	—
`X15.2.2`	affected	—
`X15.2.3`	affected	—
`X14.3.7`	affected	—
`X15.2.4.`	affected	—
`X15.2.4`	affected	—
`X15.3.0`	affected	—
`X15.3.1`	affected	—
`X15.3.2`	affected	—
`X15.4.0`	affected	—
`X15.5.0`	affected	—
`X15.5.1`	affected	—
`X15.5.2`	affected	—
`X15.5.3`	affected	—

No data.

Vendor Product Confidence Versions

Cisco

Expressway Series

100%

Version	Status	Scheme	Platform
`X8.11.2`	affected	generic	—
`X8.6`	affected	generic	—
`X8.11.3`	affected	generic	—
`X8.2.2`	affected	generic	—
`X8.8.3`	affected	generic	—
`X8.11.0`	affected	generic	—
`X12.5.2`	affected	generic	—
`X8.1.1`	affected	generic	—
`X8.9`	affected	generic	—
`X12.5.1`	affected	generic	—
`X12.5.6`	affected	generic	—
`X8.7.3`	affected	generic	—
`X12.6.0`	affected	generic	—
`X8.11.1`	affected	generic	—
`X8.5`	affected	generic	—
`X8.9.1`	affected	generic	—
`X8.10.2`	affected	generic	—
`X8.8.2`	affected	generic	—
`X8.5.3`	affected	generic	—
`X8.1`	affected	generic	—
`X8.9.2`	affected	generic	—
`X8.11.4`	affected	generic	—
`X12.5.4`	affected	generic	—
`X8.8.1`	affected	generic	—
`X8.2.1`	affected	generic	—
`X8.5.1`	affected	generic	—
`X8.6.1`	affected	generic	—
`X8.1.2`	affected	generic	—
`X8.8`	affected	generic	—
`X8.10.0`	affected	generic	—
`X12.5.3`	affected	generic	—
`X8.10.1`	affected	generic	—
`X12.5.7`	affected	generic	—
`X8.10.3`	affected	generic	—
`X8.7.1`	affected	generic	—
`X8.2`	affected	generic	—
`X12.5.8`	affected	generic	—
`X8.7`	affected	generic	—
`X8.5.2`	affected	generic	—
`X12.5.9`	affected	generic	—
`X12.5.0`	affected	generic	—
`X8.10.4`	affected	generic	—
`X8.7.2`	affected	generic	—
`X12.5.5`	affected	generic	—
`X12.6.1`	affected	generic	—
`X12.6.2`	affected	generic	—
`X12.6.3`	affected	generic	—
`X12.6.4`	affected	generic	—
`X12.7.0`	affected	generic	—
`X12.7.1`	affected	generic	—
`X14.0.0`	affected	generic	—
`X14.0.1`	affected	generic	—
`X14.0.2`	affected	generic	—
`X14.0.3`	affected	generic	—
`X14.0.4`	affected	generic	—
`X14.0.5`	affected	generic	—
`X14.0.6`	affected	generic	—
`X14.0.7`	affected	generic	—
`X14.0.8`	affected	generic	—
`X14.2.0`	affected	generic	—
`X14.0.9`	affected	generic	—
`X14.2.1`	affected	generic	—
`X14.2.2`	affected	generic	—
`X14.0.11`	affected	generic	—
`X14.2.5`	affected	generic	—
`X14.0.10`	affected	generic	—
`X14.2.6`	affected	generic	—
`X14.2.7`	affected	generic	—
`X14.3.0`	affected	generic	—
`X14.3.1`	affected	generic	—
`X14.3.2`	affected	generic	—
`X14.3.3`	affected	generic	—
`X15.0.0`	affected	generic	—
`X14.3.4`	affected	generic	—
`X14.3.5`	affected	generic	—
`X15.0.1`	affected	generic	—
`X15.0.2`	affected	generic	—
`X15.0.3`	affected	generic	—
`X14.3.6`	affected	generic	—
`X15.2.0`	affected	generic	—
`X15.2.1`	affected	generic	—
`X15.2.2`	affected	generic	—
`X15.2.3`	affected	generic	—
`X14.3.7`	affected	generic	—
`X15.2.4.`	affected	generic	—
`X15.2.4`	affected	generic	—
`X15.3.0`	affected	generic	—
`X15.3.1`	affected	generic	—
`X15.3.2`	affected	generic	—
`X15.4.0`	affected	generic	—
`X15.5.0`	affected	generic	—
`X15.5.1`	affected	generic	—
`X15.5.2`	affected	generic	—
`X15.5.3`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Deploy the October 2026 hardening release from Cisco to patch the code injection flaw.
Configure firewall or network segmentation to restrict exposure of Expressway services to trusted networks while the fix is applied.
Enable detailed logging and real‑time monitoring to detect anomalous behavior during remediation.

Generated by OpenCVE AI on October 22, 2026 at 05:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00201.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

History

Sat, 07 Nov 2026 18:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

Thu, 22 Oct 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 22 Oct 2026 11:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco expressway Series
Vendors & Products		Cisco Cisco expressway Series

Wed, 21 Oct 2026 17:15:00 +0000

Type	Values Removed	Values Added
Description		As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-76494 are related to issues concerning code injections that are grouped under the Common Weakness Enumeration (CWE) Base CWE-94.
Title		Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities
Weaknesses		CWE-94
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-exwy-hardening-FhcqBVcs
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Subscriptions

Cisco Expressway Series

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-10-21T16:17:44.657Z

Updated: 2026-11-07T17:29:43.817Z

Reserved: 2026-08-19T12:02:03.640Z

Link: CVE-2026-76494

Vulnrichment

Updated: 2026-11-07T17:29:43.817Z

NVD

Status : Awaiting Analysis

Published: 2026-10-21T17:19:08.897

Modified: 2026-11-07T18:17:28.510

Link: CVE-2026-76494

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-22T10:41:00Z

Weaknesses

CWE-94
Improper Control of Generation of Code ('Code Injection')

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object